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[edit chassis] Hierarchy Level 

chassis { 
alarm { 

interface-type { 

alarm-name (red | yellow | ignore); 

} 

} 

filter-check days; 
fpc slot-number { 
pic pic-number { 

framing (sdh | sonet); 

no-concatenate; 

} 

} 

(no-source-route | source-route); 
redundancy { 

routing-engine slot-number (master | backup | disabled ); 
ssb slot-number (always | preferred); 

} 

} # End of [edit chassis] hierarchy level 
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[edit class-of-service] Hierarchy Level 



i class-of-service { 

i input { 

fpc fpc-number{ 

\ precedence-map map-name', 

} 

interfaces { 

interface-name { 

i net-precedence-map; 
mpls-cos-map; 
unit unit-number { 

output-queue queue-number', 

} 

! } 

} 

precedence-map map-name { 

bits precedence-bit output-queue queue-number, 

: } 

} 

output { 

drop-profile profile-name { 
stream-profile { 

fill-level fill-percentage drop-probability probability-percentage; 

} 

_J plp-set-queue-profile { 

U fill-level fill-percentage drop-probability probability-percentage; 

vTl r — - plp-clear-queue-profile { 

^ v fill-level fill-percentage drop-probability probability-percentage; 

£ ) 

jjj! fpc fpc-number { 

^7 drop-profile profile-name; 

=p : j interfaces { 

g interface-name { 

transmit-queues { 

output-queue queue-number bandwidth percentage; 

^ } 

Q ; weighted-round-robin { 

y. output-queue queue-number weight percentage ; 

n 1 

^ unit unit-number { 

Q precedence-rewrite { 

output-queue queue-number { 

pip-clear rewrite-bits precedence-bit, 
pip-set rewrite-bits precedence-bit, 



> 



} 



} 

} 

} 

policy { 

class class-name { 
classification-override { 

output-queue queue-number; 

> 

} 

# End of [edit class-of-service] hierarchy level 
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[edit firewall] Hierarchy Level 



firewall { 
filter filter-name { 
term term-name { 
from { 

match-conditions; 

} 

then{ 
action ; 

action-modifiers ; 

) 

} 

} 

} # End of [edit firewall] hierarchy level 



FIGURE 10 



[edit forwarding-options] Hierarchy Level 



forwarding-options { 
sampling { 
disable; 
input { 

family inet { 
rate number; 
run-length number, 

} 

} 

output { 
cflowd hostname { 
engine-id idnumber; 
(local-dump | no-local-dump); 
port portnumber; 
version format; 

} 

file { 

filename filename; 
files number, 
size bytes; 
(stamp | no-stamp); 
(world-readable | no-world-readable); 

} 

} 

traceoptions { 
file filename { 
files number; 
size bytes; 

■ (world-readable | no-world-readable)- 

} 

} 

) 

) #End of [edit forwarding-options] hierarchy level 
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[edit groups] Hierarchy Level 

groups { 

group-name { 

configuration-data; 

} 

} #End of [edit groups] hierarchy level 
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[edit interfaces] Hierarchy Level 



interfaces { 
traceoptions { 
file filename <size size> <files number>- 

} 

interface-name { 
disable; 
atm-options { 

vpi vpi-identifier max-vcs vcs-value; 

ilmi; 

1 

clocking clock-source; 
dee; 

description text; 
el-options { 
fes (32 | 16); 

framing (g704 | unframedj; 
idle-cycle-flag (flags | ones); 
loopback (local | remote); 
start-end-flag (shared | filler); 
timeslots slot-number; 

> 

e3-options { 
bert-algorithm algorithm; 
bert-error-rate rate; 
bert-period seconds; 
compatibility-mode (digital-link | kentrox); 
fes (32 | 16); 
idle-cycle-flag value; 
loopback (local | remote); 
(payload-scrambler | no-payioad-scrambler); 
start-end-flag value; 



encapsulation type; 
fastether-options { 

(loopback | no-loopback); 

source-address-filter { 
mac-address; 

> 

(source-filtering | no-source-filtering); 



gigether-options { 
flow-control; 

(loopback | no-loopback); 
sou rce-address-fi iter { 
mac-address; 

} 

(source-filtering | no-source-filtering); 

} 

hold-time seconds; 
link-mode mode; 
mac mac-address; 
mtu bytes; 
no-keepalives; 
no-traps; 
receive-bucket { 

overflow (tag | discard); 

rate speed; 

threshold number; 



} 
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sonet-options { 
aps{ 

advertise-interval milliseconds ; 
authentication-key key; 
force; 

h o Id-time milliseconds ; 
lockout; 

neighbor address; 
paired-group group-name; 
protect-circuit group-name; 
request; 

revert-time seconds; 
working-circuit group-name; 

) 

bytes { 

el-quiet value; 
fl value; 
f2 value; 
si value; 
z3 value; 
z4 value; 

> 

fcs (32 | 16); 

loopback (local | remote); 

path-trace trace-string; 

(payload-scrambler | no-payload-scrambler); 

rfc-2615; 

(zO-increment | no-zO-increment); 

} 

speed (10m 1 100m); 
tl-options { 

buildout (0-133 | 133-266 | 266-399 | 399-532 | 532-655); 

byte-encoding (nx64 | nx56); 

fcs (32 | 16); 

framing (sf | esf); 

idle-cycle-flags (flags | ones); 

invert-data; 

line-encoding (ami | b8zs); 
loopback (local | remote); 
. start-end-flag (shared | filler); 
timeslots slot-number; 

} 

t3-options { 

bert-algorithm algorithm; 
bert-error-rate rate; 
bert-period seconds; 
(cbit-parity | no-cbit-parity); 

compatibility-mode (digital-link. | kentrox | larscom) <subrate value>; 
fcs (32 | 16); 

(feac-loop-respond | no-feac-loop-respond); 
idle-cycle-flag value; 
(long-buildout | no-long-buildout); 
loopback (local | remote); 
(payload-scrambler | no-payload-scrambler); 
start-end-flag value; 

) 

traceoptions { 

flag flag <fiag-modifier> <disable>; 

} 

transmit-bucket { 

overflow (tag | discard); 
rate speed; 
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threshold number, 

} 

vlan-tagging; 

unit logical-unit-number { 

disable; 

dlci identifier, 

encapsulation type; 

inverse-arp; 

multicast-dlci dlci-identifier ; 

multicast-vci vpi-identifier. vci-identifier; 

multipoint; 

no-traps; 

oam-liveness { 

up-count celts; 

down-count cells; 

} 

oam-peripd seconds; 
point-to-point; 
shaping { 

(cbr rate | vbr peak rate sustained rate burst length); 
queue-length number; 

} 

tunnel { 

source address; 
destination address; 
ttl number; 

} 

vci vpi-identifier.vci-identifter; 
vlan-id number; 
family family { 
filter { 

input filter-name; 

output filter-name; 

group filter-group-number; 

} 

mtu size; 
multicasts-only; 
no-redirects; 
primary; 

address address { 
arp ip-address mac mac-address <publish>; 
destination address; 
broadcast address; 



multipoint-destination destination-address (dlci dlcndentifier I vci vci-identifier)- 
multipoint-destination destination-address { 



inverse-arp; 
oam-liveness { 
up-count cells; 
down-count cells; 

} 

oam-period seconds; 
shaping { 

(cbr rate | vbr peak rate sustained rate burst length); 
queue-length number; 

J 

vci vpi-identifier. vci-identifier 

} 

primary; 
preferred; 



FIGURE 13c 



# 



hi 



vrrp-group group-number { 
virtual-address [ addresses ]; 
priority number; 
advertise-interval seconds: 
authentication-type authentication; 
authentication-key key; 
(preempt | no-preempt); 
track { 

interface interface-name priority-cost cost 

) 

} 



) 



sjsss 

m 

F 



} # End of [edit interfaces] hierarchy level 
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[edit policy-options] Hierarchy Level 



policy-options { 

as-path name regular-expression-, 
community name members [ community-ids ]; 
damping name { 
disable; 

half-life minutes; 
max-suppress minutes; 
reuse number; 
suppress number; 

} 

policy-statement policy-name { 
term term-name { 
from { 

match-conditions ; 

route-filter destination-prefix match-type <actions>; 
prefix-list name; 

} 

to{ 

match-conditions ; 

> 

then actions; 

} 

} 

prefix-list name { 
ip-addresses; 
) . 

} # End of [edit policy-options] hierarchy level 




[edit protocols] Hierarchy Level 



protocols { 



BGP 



bgp{ 



advertise-inactive; 
authentication-key key; 
cluster cluster-identifier; 
damping; 

description text-description; 
disable; 

expo rt [policy-name } ; 
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family inet { 
(any | unicast | multicast) { 
prefix-limit { 
maximum number, 
teardown <percentage>; 

} 

} 

} 

hold-time seconds; 

import [policy-name]; 

keep (all | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference locaf-preference ; 

log-updown; 

metric-out metric; 

multihop <ffl-value>; 

no-aggregator-id; 

no-client-reflect; 

out-delay seconds; 

passive; 

path-selection (cisco-non-deterministic | always-compare-med); 

peer-as autonomous-system; 

preference preference; 

remove-private; 

traceoptions { 

file name <replace> <size size> <f\\es number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifter> <disable>; 

} 

group group-name { 
advertise-inactive; 
a How [ network/ masklen]; 
authentication-key key; 
cluster duster-identifier; 
damping; 

description text-description; 
export [policy-name]; 
family inet { 

(any | unicast | multicast) { 
prefix-limit { 

maximum number; 
teardown <percentage>; 

> 

} 

} 

hold-time seconds ; 

import [policy-name]; 

keep (all | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference local-preference ; 

log-updown; 
metric-out metric; 
multihop <ffl-value>; 
multipath; 
no-aggregator-id; 
no-client-reflect; 
out-delay seconds; 
passive; 

peer-as autonomous-system; 
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preference preference; 
protocol protocol; 
remove-private; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag < flag-modi fie r> <disable>; 

) 

type type; 
neighbor address { 

advertise-inactive; 

authentication-key key; 

cluster cluster-identifier; 

damping; 

description text-description; 
export [policy-name]; 
family inet { 

(any | unicast | multicast) { 
prefix-limit { 

maximum number; 
teardown <percentage>; 

} 

} 

} 

hold-time seconds; 

import policy-name; 

keep (all | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference local-preference; 

log-updown; 

metric-out metric; 

multihop <ttl-value>; 

multipath; 

no-aggregator-id; 

no-client-reflect; 

out-delay seconds; 

passive; 

peer-as autonomous-system; 
preference preference; 
protocol protocol; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

} 

} 

} # End of [edit protocols bgp] hierarchy level 
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Isp-lifetime seconds; 
no-authentication-check; 
overload <timeout seconds>; 
reference-bandwidth reference-bandwidth ; 
traffic-engineering { 

disable; 

shortcuts; 



traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<{world-readable | no-world-readable )>; 
flag flag <flag-modifier> <disable>; 



interface interface-name { 
disable; 

csnp-interval seconds; 
hello-authentication-key key; 
hello-authentication-type authentication; 
Isp-interval milliseconds; 
mesh-group (value | blocked); 
passive; 

level level-number { 
disable; 

hello-authentication-key key, 

hello-authentication-type authentication; 

hello-interval seconds; 

hold-time seconds; 

metric metric; 

passive; 

priority priority; 

te-metric metric; 

} 

} 

} # End of [edit protocols isis] hierarchy level 



interface interface-name { 
disable; 

hello-interval seconds; 
hold-time seconds; 

} 

kee pa live-interval seconds; 
keepalive-timeout seconds; 
preference preference; , 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<{world-readable | no-world-readable)>; 
flag flag <fiag-modifier> <disable>; 

} 

} # End of [edit protocols Idp] hierarchy level 

mpls { 
disable; 

no-propagate-ttl; 
admin-groups { 

group-name group-value; 

} 

log-updown { 

(syslog | no-syslog); . 
(trap | no-trap); 

} 



} 



ldp{ 
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Connections connections { 

interface-switch connection-name { 
interface interface-name, unit-number; 
interface interface-name, unit-number, 

) 

Isp-switch connection-name { 
transmit-lsp labei-switched-path; 
rece i ve-l sp labei-s witched-pa th; 

) 

remote-interface-switch connection-name { 
interface interface-name.unit-number; 
tra n sm it-Isp labei-switched-path ; 
receive-lsp labei-switched-path; 

} 

} # End of [edit protocols connections] hierarchy level 

dvmrp { 
disable; 

export [ policy-names ]; 
import [ policy-names }; 
rib-group group-name; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

interface interface-name { 
disable; 

hold-time seconds; 
metric metric; 

) 

} # End of [edit protocols dvmrp] hierarchy level 

igmp{ 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifter> <disable>; 

} 

query-interval seconds; 
query-last-member-interval seconds ; 
query-response-interval seconds; 
robust-count seconds; 
interface interface-name { 
disable; 

version seconds; 

} 

} # End of [edit protocols igmp] hierarchy level 

IS-IS isis { 

disable; 

authentication-key key; 
authentication-type authentication; 
export [ policy-names ]; 
level level-number { 
authentication-key key; 
a uthenti cation-type authentication ; 
external-preference preference; 
preference preference; 
wide-metrics-only; 

) 



DVMRP 



i 




IGMP 
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optimize-aggressive; 
path path-name { 
disable; 

address < strict | loose>; 



i 



I 

i 



statistics { 

file filename size size files number <no-stamp>; 
interval seconds; 



traceoptions { 

file name <replace> <size size> <files number> 



<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 



traffic-engineering (bgp | bgp-igp); 
label-switched-path Isp-path-name { 
disable; 
to address; 
from address; 
adaptive; 
admin-group { 

include [ group-names ]; 
exclude [ group-names ]; 

} 

bandwidth bps; 

class-of-service class-of-service; 
fast-reroute { 

bandwidth bps; 

hop-limit number, 

include group-names; 

exclude group-names; 

> 

hop-limit number; 
Idp-tunneling; 
metric metric; 
no-cspf; 

no-decrement-ttl; 
optimize-timer seconds; 
preference preference ; 
priority setup-priority hold-priority; 
(random | least-fill | most-fill); 
(record | no-record); 
retry-limit number; 
retry-timer seconds; 
standby; 

primary path-name { 
adaptive; 
admin-group { 

include [ group-names ]; 

exclude [ group-names ); 

} 

bandwidth bps; 

class-of-service class-of-service ; 

hop-limit number; 

no-cspf; 

optimize-timer seconds; 

preference preference; 

priority setup-priority hold-priority; 

(record | no-record); 

standby; 
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; secondary path-name { 

I adaptive; 
I admin-group { 

[ include group-names; 

exclude group-names; 

} 

bandwidth bps; 

class-of-service class-of-service; 
hop-limit number; 
no-cspf; 

optimize-timer seconds; 
preference preference; 
priority setup-priority hold-priority; 
(record | no-record); 
standby; 

I install { 

destination-prefix/prefix-length <active>; 

} 

} 

interface {interface-name | all) { 
disable; 
admin-group { 
group-name; 

) 

label-map in-label{ 

(nexthop (address \ interface-name | address/interface-name)) \ (reject | discard); 
{ (pop | (swap <out-label>); 

i class-of-service class-of-service; 

4= ' preference preference; 

W ! type type; 

rii } 
\- } 

^ static-path inet { 

a prefix { 

nexthop {address \ interface-name | address/interface-name); 

pi push out-label; 

IT class-of-service class-of-service ; 

preference preference; 

y. • } 

O 1 ) 

j } # End of [edit protocols mpls] hierarchy level 

i 

i MSDP msdp { 
! disable; 



export [ policy-names ]; 
import [ policy-names ]; 
rib-group group-name; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

peer address { 
disable; 

local-address address; 
export [ policy-names ]; 
import [ policy-names ]; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 
<(world-readable | no-world-readable)>; 
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flag flag <fiag-modifier> <disable>; 

} 

} 

group group-name { 
disable; 

export [ policy-names ]; 
import [ policy-names ]; 
local-address address; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable )>; 
flag flag <flag-modifier> <disable>; 



peer address; { 
disable; 

export [ policy-names ]; 
import [ policy-names J; 
local-address address ; 
mode <(mesh-group | standard)>; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

} 

) 

} #End of [edit protocols msdp] hierarchy level 

ospf { 
disable; 

export [ policy-names ]; 
external-preference preference; 
preference preference; 
reference-bandwidth reference-bandwidth ; 
traffic-engineering { 

no-topology; 

shortcuts; 



traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifter> <disable>; 



area area-id { 

area-range network/masklen <restrict>; 
authentication-type authentication ; 
interface interface-name { 
disable; 

authentication-key tey<key-id identifier; 
dead-interval seconds; 
hello-interval seconds; 
interface-type type; 
metric metric; 

neighbor address <eligib1e>; 
passive; 

poll-interval seconds; 
priority priority; 
retransmit-interval seconds; 
transit-delay seconds ; 
transm it-interval seconds; 

} 



} 
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nssa { 

area-range network/ masklen <restrict>; 
default-metric metric, 
(summaries | no-summaries); 

} 

stub <default-metric metric> <(summaries | no-summaries)> 
virtual-link neighbor-id router-id transit-area area-id { 
disable; 

authentication-key key <key-id identifier; 
dead-interval seconds; 
hello-interval seconds; 
retransm it-interval seconds; . 
transit-delay seconds; 

} 

} 

} # End of [edit protocols ospf] hierarchy level 

pirn { 
disable; 
dense-groups { 
addresses ; 
} . 

rib-group group-name; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<( world-readable | no-world-readable)>; 
flag flag <fiag-modifier> <disable>; 



interface interface-name { 
disable; 

mode (dense | sparse | sparse-dense); 
priority number; 
version version; 

> 

rp{ 
local { 
disable; 

address address; 
group-ranges { 
destination-mask; 

} 

hold-time seconds; 
priority number; 

> 

auto-rp (announce | discovery | mapping); 
bootstrap-priority number; 
static { 

address address { 
version version; 
group-ranges { 
destination-mask; 

) 

} 

) 

} 

} # End of [edit protocols pirn] hierarchy level 

rip{ 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 
<(world-readable | no-world-readable)>; 
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flag flag <flag-modifier> <disable>- 

} 

authentication-key password; 
authentication-type type; 
(check-zero | no-check-zero); 
import [policy]; 
message-size number; 
metric-in metric; 
receive receive-options; 
send send-options; 
group group-name { 
export [policy]; 
metric-out metric; 
preference preference ; 
neighbor neighbor-name { 

authentication-key password; 

authentication-type type; 

(check-zero | no-check-zero); 

import [policy]; 

message-size number; 

metric-in metric; 

receive receive-options; 

send send-options; 

> 

} 

} # End of [edit protocols rip] hierarchy level 

router-discovery { 
disable; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 



(advertise | ignore); 
(broadcast | multicast); 
(priority priority | ineligible); 

} 

} # End of [edit protocols router-discovery] hierarchy level 

rsvp{ 
disable; 

keep-multiplier number; 
refresh-time seconds; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 



interface interface-name { 
disable; 

(aggregate | no-aggregate); 
authentication-key key; 
bandwidth bps; 



} 

interface interface-name { 



min-advertisement-interval seconds; 
max-advertisement-interva I seconds ; 
lifetime seconds; 



address address { 
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} 



hello-interval seconds; 
subscription percentage; 



} # End of [edit protocols rsvp] hierarchy level 

SDP/SAP sap { 

disable; 

listen <address> <port port>; 
} # End of [edit protocols sap] hierarchy level 



VRRP traceoptions { 
flag flag; 

} # End of [edit protocols vrrp] hierarchy level 
} # End of [edit protocols] hierarchy level 



! FIGURE 15k 
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[edit routing~instances] Hierarchy Level 



[edit] 

routing-instances routing-instance-name { 
interface interface-name; 
protocols { 
ospf { 

ospf-configuration; 

) 

> 

routing-options { 
aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community {[ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

autonomous-system autonomous-system <loops number>; 

confederation confederation-autonomous-system members autonomous-system; 

fate-sharing { 

group group-name; 

cost value; 

from address [to address] ; 



(active | passive); 

as-path <as-path> <ortgtn (egp | igp | incomplete | none)> <atomic-aggregate> 

<aggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



forward ing-table { 

export [ policy-names ]; 



generate { 
defaults { 




interface-routes { 
ri b-grou p routing-table-name ; 

} 

martians { 
destination-preftx match-type <allow>; 

} 

multicast { 
scope scope-name { 

interface interface-name; 
prefix destination-prefix; 

> 



rib routing-table { 
aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed I none)* 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ) \ no-advertise | no-export | no-export-subconfed I none) 1 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community {[ community-ids ] | no-advertise | no-export | no-export-subconfed I none)- 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

> 

martians { 

destination-prefix match-type <allow>; 



options { 

syslog (level level | upto level); 
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static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> otomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

> 

route destination-prefix { 
policy policy-name]; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

} 

rib-groups { 
group-name { 

import-rib [ group-name ]; 
export-rib group-name; 

) 

) 

route-record; 
router-id address ; 
static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 



traceoptions { 

file name <replace> <size $ize> <files numbeo <no-stamp> 
<(world-readable | no-world-readable)>; 
flag flag <flag-modifter> <disable>; 

} 
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[edit routing-options] Hierarchy Level 



routing-options { 
aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in~address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | rnetric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

) 

autonomous-system autonomous-system < loops number>; 

confederation confederation-autonomous-system members autonomous-system; 

forward ing-table { 

export [ policy-names ]; 

} 

generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



route destination-prefix' { 
policy policy-name; 
(active | passive); 

as-path <a$-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] \ no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 
) . 

} 

interface-routes { 

rib-group routing-table-name; 

} 

martians { 

destination-prefix match-type <allow>; 

} 



} 
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multicast { 

scope scope-name { 

interface interface-name; 
prefix destination-prefix; 

) 

} 

options { 

syslog (level /eve/ 1 upto level); 

) 

rib routing-table { 
static { 
defaults { 

(active | passive) ; 

as-path <as-path> <origin (egp | igp | incomplete |.none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ) | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

) 

route destination-prefix { 
next-hop; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); , 
(no-retain | retain); 
(tag | tag2) string; 

} 

aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> otomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

> 

route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> origin (egp | igp | incomplete | none)> otomtc-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids } | no-advertise | no-export | nonexport-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 
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generate { ^ 
defaults { 

(active I passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atom.c-aggregate> 

<aggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no^xport-subconfed | none); 

(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

route destination-prefix { 
policy policy-name; 
(active I passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

<aggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 

(fuli | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

} 

martians { 

destination-prefix match-type <allow>; 

} 

} 

rib-groups { 
group-name { 

import-rib [ group-name ); 
export-rib group-name ; 

} 

} 

router-id address ; 
static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids J | no-advertise | nc-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

route destination-prefix { 
next-hop; 

— > — ' — ' -* 

(install | no-install); 

(metric I metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 

(readvertise | no-readvertise); ; p I I IDC 1 7 P 

(no-retain | retain); riUUIXU I i ^ 

(tag | tag2) string; 

} 

U Tna:eirep.ace> <size s,ze> <fi»es number> <no-stamp> 
<(world-readable | no-world-readable)>; 
flag flag <flag-wodifter> <disable>; 

} # End of [edit routing-options] hierarchy level 



[edit sntnp] Hierarchy Level 



snmp { 

description description; 
location location; 
contact contact; 
interface f interface-names J; 
community community-name { 
a uth orization authoriza tion ; 
clients { 

default restrict; 
address <restrict>; 

} 

} 

trap-group group-name { 
categories category; 
targets { 
address ; 

> 

version version; 

> 

traceoptions { 

file <files number* <size size>; 
.flag flag <disable>; 

} 

} # End of [edit snmp] hierarchy level 
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[edit system] Hierarchy Level 



system { 

authentication-order [ authentication-methods ]; 
backup-router address destination destination-address>' t 
compress-configuration-files; 
default-address-selection; 
dhcp-relay (server address | disable); 

diag-port-authentication (encrypted-password "password" | plain-text-password); 
domain-name domain-name; 
domain-search [domain-list]; 
host-name host-name; 
j location { 

altitude feet; 

country-code code; 

h coord horizon tal-coordinate ; 

lata service-area; 

latitude degrees; 

longitude degrees; 

npa-nxx number; 

postal-code postal-code; 

vcoord vertical-coordinate; 

) 

login { 

message text; 
class class-name { 

a I low-commands "regular-expression" ; 

deny-commands " regular-expression"; 

idle-timeout minutes; 

permissions [ permissions ]; 

) 

user user-name [ 
full-name complete-name; 
uid uid-value; 
class class-name; 
authentication { 

(encrypted-password "password" \ 

ssh-rsa "public-key"; 

} 

) 



plain-text-password); 
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name-server{ 
address; 

} 

no-redirects; 
ntp{ 

authentication-key key-number type type value password; 
boot-server address; 

broadcast <address> <key key-number> <version value> <ttl value>; 

broadcast-client; 

muiticast-cliept <address>; 

peer address <key key-number> <version value> <prefer>; 
server address <key key-number> <version value> <prefer>; 
trusted-key [ key-numbers J; 

} 

ports { 
auxiliary { 
insecure; 
speed baud-rate; 
type terminal-type; 

} 

console { 
insecure; 
speed baud-rate; 
type terminal-type; 



I } 
} 

processes { 
inet-process (enable | disable); 
interface-control (enable | disable);, 
mib-process (enable | disable); 
ntp (enable | disable); 

routing (enable | disable); 
snmp (enable | disable); 

watchdog (enable | disable) <timeout seconds>: 

) 

radius-server server-address { 
port number; 
retry number, 
secret password; 
timeout seconds; 

} 

root-authentication { 

(encrypted-password "password" | plain-text-password); 
ssh-rsa "public-kef; 

) 

services { 

finger <connection-limit limi> <rate-limit iimi>; 
ssh <connection-limit limit> <rate-limit limit>; 
telnet <connection-limit limit> <rate-limit limi>; 

) 

static-host-mapping { 
host-name { 
inet [ address ]; 
sysid system-identifier; 
alias [ alias ]; 

} 

) 

syslog { 
file filename { 
facility level; 
archive { 

files number; 
size size; 

(world-readable | no-world-readable); 

} 

} 

host hostname { 
facility level; 
facility-override facility, 
log-prefix string; 

) 

user (username \*){ 
facility level; 

} 

console { 
facility level; 

) 

archive { 

files number; 
size size; 

(world-readabie | nc~world-readable); 

} 

} 

tac pi us-server server-address { 
secret password; 
single-connection; 
timeout seconds; 

} 

time-zone time-zone; 
}) # End of [edit system] hierarchy level 



i 
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